Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/6532f703-3694-3957-9e5b-d2c1c0162b4e.roa
File: 6532f703-3694-3957-9e5b-d2c1c0162b4e.roa (raw, json)
Hash identifier: 76ZOD0EctqFNCT7c8QIv6oWa2BjcikNSVyk2zlFCgq0=
Subject key identifier: 58:68:FA:17:68:45:50:43:EA:57:B1:2A:27:CD:CF:54:72:F8:B5:E0
Certificate issuer: /CN=8b56caea-2136-4342-baff-6f31268d4cc4
Certificate serial: 010D0C9F43285848A8309FDDD9EB062205A44EC0
Authority key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/6532f703-3694-3957-9e5b-d2c1c0162b4e.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 47536
IP address blocks: 140.235.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:9f:dd:d9:eb:06:22:05:a4:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b56caea-2136-4342-baff-6f31268d4cc4
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=a47b711c-e6d2-4f23-a083-105511f66ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:d3:fa:b2:2b:0c:16:12:7e:24:f8:c2:6f:
3f:fd:97:12:ac:2c:70:28:fd:10:52:3d:b8:3f:72:
2f:b1:bc:33:6e:a2:02:1a:36:9f:90:8b:f9:ca:f4:
d6:f1:db:d2:41:7b:b1:d5:51:08:5c:fd:dd:e5:ec:
46:f9:b0:f8:7b:34:d8:47:f8:af:10:42:dd:90:57:
e3:19:6c:7b:8f:ac:54:3e:57:01:0c:73:48:30:16:
bb:08:ef:85:96:22:74:c0:08:78:42:22:74:0f:a1:
60:aa:80:37:d2:1a:00:1b:8e:17:43:3b:f0:f7:8a:
33:c2:c7:73:03:41:ae:21:18:bd:56:b6:80:c1:53:
9d:90:82:77:94:2a:76:e7:49:e3:53:75:95:e6:03:
90:66:e2:cd:c4:3a:1a:64:03:24:af:79:2d:b3:7e:
36:54:c9:e8:34:27:6e:ba:5e:7f:f3:c3:70:02:3e:
f6:b7:61:b9:96:be:54:f8:73:11:c3:46:84:83:e4:
04:39:29:b8:04:df:81:26:76:1a:ab:2c:70:37:76:
81:eb:b6:3d:dc:82:88:c6:73:7e:80:37:07:48:6b:
94:71:6f:a3:96:7a:19:83:64:29:3e:23:9b:34:5a:
7c:07:ed:7a:ce:c1:f6:2e:a1:a0:84:9c:7e:ce:2e:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:68:FA:17:68:45:50:43:EA:57:B1:2A:27:CD:CF:54:72:F8:B5:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/6532f703-3694-3957-9e5b-d2c1c0162b4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl
X509v3 Authority Key Identifier:
keyid:5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:b0:e2:5c:e6:3a:01:78:6b:ab:cf:dd:17:cf:63:14:a5:9c:
09:f7:79:44:c2:28:05:b7:e0:a6:ea:19:15:22:8d:bd:9b:89:
98:e3:58:19:8f:80:b7:e6:3a:00:19:0c:02:15:4c:b8:1a:dc:
37:f1:8b:05:de:43:b5:3f:99:a1:c0:6a:43:de:01:e9:a3:f4:
b2:bc:60:87:b8:de:23:52:43:45:82:87:e3:bb:90:71:ff:e1:
e6:d4:b8:c4:da:50:43:b8:00:9a:bf:59:1c:9c:1d:19:d5:af:
51:9b:23:30:52:52:ea:a8:40:0b:16:82:aa:08:c0:c3:01:4d:
0f:fe:a9:f5:e4:5e:c6:83:0e:12:49:e3:1c:12:47:44:c7:47:
2c:86:f8:7a:a8:a8:e5:2a:24:dc:05:39:9b:23:14:d7:af:51:
07:ed:9b:3f:03:b6:b7:06:b2:01:e0:4c:1c:45:71:a1:60:a2:
e6:39:14:05:ce:5c:ef:72:9b:bb:ff:64:a2:a2:c8:fd:3b:a1:
d8:e9:2c:b8:23:06:61:51:fc:26:7e:e3:43:0a:38:fd:d1:4b:
c2:db:64:fc:73:ba:0b:fe:25:31:af:25:52:2e:9b:95:0d:03:
c9:92:03:27:3c:12:12:f1:f3:34:77:ed:0d:96:9b:e9:24:f5:
66:7c:d0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:53 2025 by rpki-client